- 141/2025
- High
Google has released an updated Chrome version 138.0.7204.96/.97 for Windows, 138.0.7204.92/.93 for Mac, and 138.0.7204.96 for Linux.
The addressed vulnerabilities could allow the remote attacker to execute arbitrary code and gain access to the affected system by sending a crafted HTML.
Google Chrome Code Execution Vulnerability (CVE-2025-6554):
- CVSS: 8.8
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: Required
- Consequences: Gain Access
Vulnerabilities
CVE-2025-6554
Mitigations
The enterprise should deploy this patch as soon as the testing phase is completed.